$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json) Hash identifier: t8ueRcU2TBbhjBTGhQGPnN7vCBcYAY0LhQRIjKLYwfA= Subject key identifier: E6:9D:61:FD:61:FA:2B:0F:E3:32:59:C9:B8:9D:94:8D:4E:B4:9F:5C Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft Manifest number: 7A Signing time: Mon 21 Sep 2026 07:47:01 +0000 Manifest this update: Mon 21 Sep 2026 07:47:00 +0000 Manifest next update: Mon 28 Sep 2026 07:47:00 +0000 Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: GpESRe5u1S3UJAhOVXMzyYtVOqzTBnoCffswU2s40rg=) 2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Validity Not Before: Sep 21 07:47:00 2026 GMT Not After : Sep 28 07:47:00 2026 GMT Subject: CN=6ab0e0f4-5c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:60:ba:68:e2:31:1b:87:b6:fe:01:88:70: 73:29:d5:8b:d2:b8:aa:15:7b:3b:6f:fb:2a:f6:10: 2b:c7:c4:b4:22:56:50:cc:1c:80:ea:f1:f5:ad:e0: fc:30:bb:36:d1:d0:79:79:5b:3f:71:e2:4a:49:97: 65:50:4b:cf:5a:d1:8a:28:ea:cd:71:04:ee:fe:70: 36:97:60:10:1c:20:e4:1b:37:01:bb:10:8e:df:d3: 73:0a:5f:9d:75:b2:c7:24:0d:ef:94:3c:8b:a0:1a: 19:38:8c:6b:22:0a:45:62:42:e2:3d:d0:7a:fc:6a: 5f:d4:4c:67:a8:97:6f:f0:bb:c7:f4:d5:4d:8e:79: 57:dd:b9:18:50:86:fc:9a:5d:17:71:ce:89:86:58: 15:df:6b:9a:e4:53:30:cc:d8:4c:a6:22:18:19:e5: 50:c1:98:ea:85:2c:98:67:ce:40:70:07:c0:47:1a: c4:08:4f:64:b0:1c:53:19:38:e5:28:9a:f8:c5:8e: 5f:02:45:2a:37:b6:d8:25:81:28:8b:0c:f5:b8:91: 06:6a:37:32:b9:68:b5:d9:df:9b:00:2d:1e:fe:fc: 6c:b3:aa:81:c0:ff:a4:78:d4:bd:60:19:57:37:b4: 12:ee:5e:ab:95:be:89:e6:33:b1:20:ad:3b:3b:bb: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:61:FD:61:FA:2B:0F:E3:32:59:C9:B8:9D:94:8D:4E:B4:9F:5C X509v3 Authority Key Identifier: keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:02:c6:fa:4f:ab:1c:ee:2e:98:7a:6f:02:3b:62:02:11:44: dc:2a:24:58:10:a1:0c:cc:70:6f:50:71:12:53:4f:bf:26:70: f8:88:93:d6:3a:59:e5:0d:ed:4e:1d:59:e8:d3:6a:82:22:c3: 57:6c:1e:d8:c9:df:49:7c:33:c4:ab:6f:86:b3:e4:d9:54:74: ae:ab:e7:4d:1d:ff:b5:7c:0b:cf:f8:b9:74:15:1f:a5:96:d0: b0:ad:f8:03:be:66:17:de:d0:62:97:18:ce:66:54:74:07:93: 07:bc:97:aa:b7:57:08:f6:df:f9:8a:3b:bb:f6:7f:13:20:a8: a2:5a:39:38:6f:0d:58:d1:8a:72:48:dc:aa:ab:80:b9:2b:11: 0f:4f:8b:82:a9:8a:68:f5:cc:ea:d3:24:d9:db:eb:e4:8a:a3: d4:af:01:a5:01:11:4e:6c:c7:cd:a6:6f:86:02:0e:f1:ec:0c: 38:68:14:ad:6c:4a:3f:64:14:40:17:b7:6a:56:ae:b8:d3:7d: 16:c0:cb:9a:1f:07:f5:a4:c2:c6:22:0e:ec:9c:2b:23:43:37: 11:29:56:e5:6a:fd:31:a1:5c:9a:bf:45:25:33:20:f3:6c:17: 03:fd:58:47:9e:c3:9e:84:5b:ba:93:c0:30:07:38:42:52:5c: 16:61:9d:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG RkQ2REUyOTAeFw0yNjA5MjEwNzQ3MDBaFw0yNjA5MjgwNzQ3MDBaMBgxFjAUBgNV BAMTDTZhYjBlMGY0LTVjODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCO3WC6aOIxG4e2/gGIcHMp1YvSuKoVeztv+yr2ECvHxLQiVlDMHIDq8fWt4Pww uzbR0Hl5Wz9x4kpJl2VQS89a0Yoo6s1xBO7+cDaXYBAcIOQbNwG7EI7f03MKX511 ssckDe+UPIugGhk4jGsiCkViQuI90Hr8al/UTGeol2/wu8f01U2OeVfduRhQhvya XRdxzomGWBXfa5rkUzDM2EymIhgZ5VDBmOqFLJhnzkBwB8BHGsQIT2SwHFMZOOUo mvjFjl8CRSo3ttglgSiLDPW4kQZqNzK5aLXZ35sALR7+/GyzqoHA/6R41L1gGVc3 tBLuXquVvonmM7EgrTs7u77xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5p1h/WH6 Kw/jMlnJuJ2UjU60n1wwHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5 akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCAsb6T6sc7i6Yem8CO2ICEUTcKiRYEKEMzHBvUHESU0+/JnD4iJPWOlnlDe1O HVno02qCIsNXbB7Yyd9JfDPEq2+Gs+TZVHSuq+dNHf+1fAvP+Ll0FR+lltCwrfgD vmYX3tBilxjOZlR0B5MHvJeqt1cI9t/5iju79n8TIKiiWjk4bw1Y0YpySNyqq4C5 KxEPT4uCqYpo9czq0yTZ2+vkiqPUrwGlARFObMfNpm+GAg7x7Aw4aBStbEo/ZBRA F7dqVq64030WwMuaHwf1pMLGIg7snCsjQzcRKVblav0xoVyav0UlMyDzbBcD/VhH nsOehFu6k8AwBzhCUlwWYZ3S -----END CERTIFICATE-----Generated at Tue Sep 22 21:17:50 2026 by rpki-client